General
-
Target
e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973N.exe
-
Size
74KB
-
Sample
241118-dgs8hsxclp
-
MD5
d3dfbf8e06298424fc316903df5b5d90
-
SHA1
636e3f66cfdb800ed9719fc307415792598cbe78
-
SHA256
e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973
-
SHA512
06d93555938b8c736206b299ab44f36fe0b6fc9f3009cf254d701804307d09e50f37abb23d3bef8bef19532b6745e3c66d56e476ed68a7d4cd3e074a463c49b7
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHIK:Tk8yn7KdmTINQXzz4p
Static task
static1
Behavioral task
behavioral1
Sample
e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973N.exe
-
Size
74KB
-
MD5
d3dfbf8e06298424fc316903df5b5d90
-
SHA1
636e3f66cfdb800ed9719fc307415792598cbe78
-
SHA256
e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973
-
SHA512
06d93555938b8c736206b299ab44f36fe0b6fc9f3009cf254d701804307d09e50f37abb23d3bef8bef19532b6745e3c66d56e476ed68a7d4cd3e074a463c49b7
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHIK:Tk8yn7KdmTINQXzz4p
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-